What is “Ursu.93629”?

The Ursu.93629 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Ursu.93629 virus can do?

Executable code extraction
Sniffs keystrokes

How to determine Ursu.93629?


File Info:
crc32: 3B7EDE2D
md5: 8a460b36b890d98884c206a7661a0801
name: 8A460B36B890D98884C206A7661A0801.mlw
sha1: 69ea3d34bb84a0060dcb57dca87130f204f43b42
sha256: c69a24ea036a8b60fe7641f95decfb85d5148988cadbacaae3c6549c05e8d033
sha512: 7423039a07c965cfef1835fd50b66d8b09849d8aefa85c9c5757e9b0ace478ab48da28caf844f713e9017840ab6cfbc3b29fe3c9ad4aa48fefa47086100ab91c
ssdeep: 6144:rkNgFrYqM9M7L4t0T1acWiLs6WIQWXIcmU3vxs+n:rYUYqM9g4yT86WIZB2
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
Translation: 0x0409 0x04b0
InternalName: Amazing
FileVersion: 1.03.0001
ProductName: TCP/IP PM
ProductVersion: 1.03.0001
FileDescription: TCP/IP Protocol Manager
OriginalFilename: Amazing.exe

Ursu.93629 also known as:

Lionic	Trojan.Win32.Blocker.4!c
Elastic	malicious (high confidence)
DrWeb	BACKDOOR.Trojan
ALYac	Gen:Variant.Ursu.93629
Zillya	Trojan.Blocker.Win32.35882
Sangfor	Trojan.Win32.Save.a
Alibaba	Ransom:Win32/Blocker.c033f49e
K7GW	Trojan ( 0000000c1 )
K7AntiVirus	Trojan ( 0000000c1 )
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/VB.ORE
APEX	Malicious
Avast	Win32:Malware-gen
Kaspersky	Trojan-Ransom.Win32.Blocker.jlag
BitDefender	Gen:Variant.Ursu.93629
NANO-Antivirus	Trojan.Win32.Blocker.eigmak
MicroWorld-eScan	Gen:Variant.Ursu.93629
Tencent	Win32.Trojan.Blocker.Eaxa
Ad-Aware	Gen:Variant.Ursu.93629
Sophos	Mal/Generic-S
Comodo	Malware@#1fjacduwpgs7z
BitDefenderTheta	Gen:NN.ZevbaF.34058.wm0@aKpWwWci
VIPRE	Backdoor.Win32.Retig.de (v)
McAfee-GW-Edition	BehavesLike.Win32.BadFile.fm
FireEye	Generic.mg.8a460b36b890d988
Emsisoft	Gen:Variant.Ursu.93629 (B)
SentinelOne	Static AI – Suspicious PE
Jiangmin	Trojan.Blocker.fqb
Avira	TR/Spy.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.1C3A47A
Kingsoft	Win32.Troj.Undef.(kcloud)
Microsoft	TrojanDropper:Win32/Randrew.A!rfn
ZoneAlarm	Trojan-Ransom.Win32.Blocker.jlag
GData	Gen:Variant.Ursu.93629
AhnLab-V3	Trojan/Win32.Dynamer.C1658793
McAfee	Artemis!8A460B36B890
MAX	malware (ai score=87)
VBA32	Trojan.VB.Levelup
Panda	Trj/CI.A
Rising	Trojan.Injector!1.B459 (CLASSIC)
Yandex	Trojan.GenAsa!krIplDrLAaI
Ikarus	Trojan-Dropper.Delf
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/VB.ORE!worm
AVG	Win32:Malware-gen
Paloalto	generic.ml
Qihoo-360	Win32/Ransom.Blocker.HgAASRAA

How to remove Ursu.93629?

Ursu.93629 removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X